Fake windows system restore virus.. help!

[braz]

My friend's laptop is infected with this fake system restore virus. This scan pop ups when you start up the laptop saying there are all of these RAM errors and a bunch of other junk. It also has hidden every file, desktop icon-everything. I have googled it, it is a common virus. I put spybot on a flashdrive, ran it in safe mode and still found nothing surprisingly. I am currently running it normally and waiting for the results. Could anyone help me remove this without having to do a format? I am shocked that spybot did not find it in safe mode!

 

[MindoverMaster]

Try using MalwareBytes in safe mode.

 

[braz]

should I install that in safe mode?

 

[C0RR0SIVE]

Yes if possible.

Remember to disable system restore points, remove temp files and umm, maybe post this in the virus section next time? XD

 

[braz]

Sorry! didn't mean to post here! Ok... so it found 12 infections, I removed them all... but now when it restarts there is just a pink screen (I think it used to be part of her wallpaper) and I have a mouse and that is it. No start button, can't right click-nothing. I can hit cntrl alt delte though and get the task manager up, but that is it! By the way it is windows vista. I tried doing repair in the boot options but there is nothing. What can I do to restore the regular function of windows???

 

[MindoverMaster]

From the Task Manager, go to file -> new process, type in explorer.exe

See if that helps.

 

[braz]

Aha!!! it worked! You are a life saver, I appreciate everyone's help! Time to clean this laptop up and install AVG on it!!

 

[MindoverMaster]

Glad you got it sorted.